This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ibLgKk9QFSaymfG7iu24Vpm4JeM.roa File: ibLgKk9QFSaymfG7iu24Vpm4JeM.roa (raw, json) Hash identifier: C7Ii7SX6fmwe5B4K64ids8X5WSUt+lg2/xhaHcMVoLw= Subject key identifier: 89:B2:E0:2A:4F:50:15:26:B2:99:F1:BB:8A:ED:B8:56:99:B8:25:E3 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019ADECD015F48F94C5D61AF0FC7B7AD7290 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ibLgKk9QFSaymfG7iu24Vpm4JeM.roa Signing time: Tue 02 Dec 2025 11:22:48 +0000 ROA not before: Tue 02 Dec 2025 11:22:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 62.72.162.0/23 maxlen: 23 62.72.164.0/22 maxlen: 22 62.72.164.0/23 maxlen: 23 62.72.168.0/24 maxlen: 24 62.72.171.0/24 maxlen: 24 81.21.1.0/24 maxlen: 24 81.21.2.0/23 maxlen: 23 81.21.4.0/22 maxlen: 24 176.57.56.0/24 maxlen: 24 176.57.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:cd:01:5f:48:f9:4c:5d:61:af:0f:c7:b7:ad:72:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Dec 2 11:22:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89b2e02a4f501526b299f1bb8aedb85699b825e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5f:ea:68:48:4c:9b:55:9c:c1:74:23:18:4c: 10:8c:b1:d1:7e:4a:a0:ec:c6:e7:12:ec:ec:70:7f: 61:97:2a:96:21:93:36:4c:8f:d4:71:7c:cc:64:ea: 3a:7e:27:76:07:43:7c:18:a3:2a:f0:6b:c7:d9:cc: da:c9:81:cd:fc:97:79:d3:7a:a4:6b:af:0f:c9:d6: d1:8b:6c:1e:13:44:09:ff:a5:3d:8d:66:ca:59:0b: cc:ec:8c:93:4a:3a:a4:6d:f1:2e:fc:b2:36:a7:28: 35:12:65:93:1a:ca:37:34:4d:69:18:b5:5d:77:01: 76:ed:2a:8d:89:0d:7f:c4:99:72:e6:75:ad:e8:18: 1e:52:63:84:cb:99:d0:eb:51:56:27:5c:c5:6d:d8: 82:c3:8f:7a:55:60:67:d2:75:1c:0b:ae:39:9e:45: 0a:6f:cb:f9:55:7f:d7:8a:8f:da:38:b0:91:b8:01: 48:fe:8b:f5:49:8a:fd:34:19:9d:a6:07:a3:3f:45: 46:ef:59:4b:63:5b:78:d2:c6:b4:d9:52:68:59:68: 7e:ad:30:d9:9b:64:03:b3:2d:3d:f5:05:09:7f:9c: af:f7:5c:7f:8c:6c:91:4a:b3:11:3d:32:ba:09:88: f5:16:56:f7:0b:3d:06:43:1d:5a:43:1e:ee:be:23: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B2:E0:2A:4F:50:15:26:B2:99:F1:BB:8A:ED:B8:56:99:B8:25:E3 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ibLgKk9QFSaymfG7iu24Vpm4JeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.162.0-62.72.168.255 62.72.171.0/24 81.21.1.0-81.21.7.255 176.57.56.0/24 176.57.63.0/24 Signature Algorithm: sha256WithRSAEncryption 99:b2:66:31:42:69:95:59:ba:b8:92:a1:36:74:6e:a7:78:73: a9:ed:ed:a3:07:62:ae:6b:7e:ff:04:97:f8:4a:31:7b:e2:c2: 96:1b:1e:f5:7a:3c:8c:f6:21:d9:ae:45:a5:d5:aa:6e:23:2f: 6b:a8:ed:aa:f0:36:cb:17:dc:df:26:bd:88:a8:db:08:34:8f: 0d:05:7e:b1:3c:60:c6:fd:31:c9:1f:3b:06:9c:d1:03:fb:3b: d6:03:f5:ea:95:79:71:4b:33:fd:a9:f2:ce:a0:4b:2b:fa:c5: 6a:98:71:2a:53:b0:83:6a:28:24:d5:a7:06:a7:2d:bd:e5:56: cf:26:df:85:02:18:05:08:7d:42:79:a8:1a:d1:90:d0:46:66: a0:83:d5:3a:65:67:a6:a1:63:c0:8b:0a:b2:df:5e:96:ce:f6: 8f:4b:b3:a1:f2:77:61:75:2d:ce:cc:ce:66:ca:33:39:de:f6: d7:c7:81:aa:a3:3d:48:31:3a:06:a7:2f:d9:79:ab:a2:e3:fa: 2d:f4:c3:77:c4:6f:51:a9:88:b2:f0:61:56:e5:c9:0c:a3:80: 7e:09:e9:05:78:79:9e:8d:4f:39:e8:bc:6b:66:21:37:7b:37: b7:88:49:ac:cc:04:2c:93:06:cd:a7:5f:7f:d6:a3:1f:05:e1: 9e:83:ca:84 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZrezQFfSPlMXWGvD8e3rXKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjUxMjAyMTEyMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWIyZTAyYTRmNTAxNTI2YjI5OWYxYmI4YWVkYjg1Njk5YjgyNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl/qaEhMm1WcwXQjGEwQjLHRfkqg 7MbnEuzscH9hlyqWIZM2TI/UcXzMZOo6fid2B0N8GKMq8GvH2czayYHN/Jd503qk a68PydbRi2weE0QJ/6U9jWbKWQvM7IyTSjqkbfEu/LI2pyg1EmWTGso3NE1pGLVd dwF27SqNiQ1/xJly5nWt6BgeUmOEy5nQ61FWJ1zFbdiCw496VWBn0nUcC645nkUK b8v5VX/Xio/aOLCRuAFI/ov1SYr9NBmdpgejP0VG71lLY1t40sa02VJoWWh+rTDZ m2QDsy099QUJf5yv91x/jGyRSrMRPTK6CYj1Flb3Cz0GQx1aQx7uviP7PQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFImy4CpPUBUmspnxu4rtuFaZuCXjMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvaWJMZ0trOVFGU2F5bWZHN2l1MjRWcG00SmVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAE+SKID BAA+SKgDBAA+SKswDAMEAFEVAQMEA1EVAAMEALA5OAMEALA5PzANBgkqhkiG9w0B AQsFAAOCAQEAmbJmMUJplVm6uJKhNnRup3hzqe3towdirmt+/wSX+Eoxe+LClhse 9Xo8jPYh2a5FpdWqbiMva6jtqvA2yxfc3ya9iKjbCDSPDQV+sTxgxv0xyR87BpzR A/s71gP16pV5cUsz/anyzqBLK/rFaphxKlOwg2ooJNWnBqctveVWzybfhQIYBQh9 QnmoGtGQ0EZmoIPVOmVnpqFjwIsKst9els72j0uzofJ3YXUtzszOZsozOd7218eB qqM9SDE6Bqcv2XmrouP6LfTDd8RvUamIsvBhVuXJDKOAfgnpBXh5no1POei8a2Yh N3s3t4hJrMwELJMGzadff9ajHwXhnoPKhA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:14 2025 by rpki-client